Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/2YLDRFiHfP3v-k9QV1yr33OWWLU.roa
File: 2YLDRFiHfP3v-k9QV1yr33OWWLU.roa (raw, json)
Hash identifier: UwgUNfWHVngUvtQtuia/zD7ucRBIKdd4Vn4rjyaVxsE=
Subject key identifier: D9:82:C3:44:58:87:7C:FD:EF:FA:4F:50:57:5C:AB:DF:73:96:58:B5
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 018570FBD6192E7E79735A9C7790432ED12E
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/2YLDRFiHfP3v-k9QV1yr33OWWLU.roa
Signing time: Mon 02 Jan 2023 05:37:10 +0000
ROA not before: Mon 02 Jan 2023 05:37:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46450
IP address blocks: 155.193.12.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:d6:19:2e:7e:79:73:5a:9c:77:90:43:2e:d1:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Jan 2 05:37:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d982c34458877cfdeffa4f50575cabdf739658b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:01:ef:04:bd:1b:02:72:86:4f:c4:c7:8f:55:
6a:d3:cb:ed:b2:cf:ac:07:1d:82:f2:cb:68:b7:45:
ca:c0:a8:32:97:56:3b:19:64:1b:b5:d3:17:c9:6f:
0e:49:82:30:d3:a1:f5:6e:07:48:ac:ae:39:47:65:
13:97:a4:a7:f8:f3:73:6c:bf:a3:34:85:55:b9:b0:
f4:ae:7c:5b:e9:95:25:d6:d5:5a:49:1f:2a:99:3e:
4b:2d:0c:92:c2:bd:32:e4:e5:14:25:6a:6f:f5:20:
da:04:a2:54:61:2c:ff:5d:d9:38:3d:27:c2:93:cc:
72:f6:5e:e3:54:94:e1:7e:5c:b7:df:57:4b:bf:98:
4d:25:81:32:b8:aa:f8:2c:f5:92:b9:63:1b:86:7f:
a9:4f:7b:e3:7d:ad:57:f0:75:a8:80:e2:c7:15:96:
6a:2e:13:23:45:3a:af:85:a1:c9:99:d7:93:92:5e:
a2:66:1c:48:98:c1:e7:7e:04:6a:68:89:e5:05:04:
5b:27:d0:20:71:a6:50:67:89:da:a4:bf:c9:95:88:
06:67:ae:3d:a9:ee:04:2a:35:30:29:cb:3d:e0:27:
d6:d0:d0:ec:69:ec:27:22:9b:ff:3e:29:36:a2:79:
ad:5b:5c:39:e5:6e:56:ff:4b:0f:e7:81:7a:3f:e8:
9c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:82:C3:44:58:87:7C:FD:EF:FA:4F:50:57:5C:AB:DF:73:96:58:B5
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/2YLDRFiHfP3v-k9QV1yr33OWWLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.193.12.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:3a:e0:fa:37:2b:99:16:8d:91:36:ae:75:e8:bc:c4:01:6d:
83:99:3f:e7:d2:33:59:43:39:c2:e4:e7:1b:a0:8b:5a:11:28:
7b:49:ee:56:df:16:ea:12:63:a9:9f:d2:ea:37:81:68:dd:e9:
36:5f:e9:d9:e9:1e:85:d6:f7:8d:71:4a:c0:16:fa:bb:65:6c:
f2:8c:a4:2c:36:b0:c6:83:56:0d:eb:a4:f7:6c:aa:13:cf:5a:
21:42:1d:69:e7:2b:f8:b6:38:15:4d:d7:b0:d2:32:a2:4d:88:
c9:ff:0e:ad:5a:ea:87:44:72:3a:29:7a:6c:d1:c9:2d:f8:8c:
8f:0e:67:c8:35:48:56:a9:d5:c7:6e:a9:ae:ed:0c:98:a1:99:
17:6c:9d:e2:1a:f3:7f:ad:58:b0:3d:4a:f8:6e:11:c3:6a:44:
44:d2:8e:bd:92:3b:90:b8:72:34:4f:84:25:43:8b:96:a2:1a:
9f:8a:88:bc:12:91:9f:ce:32:de:df:3f:e2:fc:a0:c2:8c:29:
4e:2c:a0:3e:aa:52:c9:b6:75:16:fb:a1:a0:41:7f:bc:57:22:
e6:bd:4a:e8:98:6b:a2:03:a1:6b:cd:bd:ef:0e:0d:dd:d7:be:
df:ff:51:ba:88:50:bc:42:b1:bb:ae:56:37:86:c2:10:86:4b:
e9:16:96:ac
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVw+9YZLn55c1qcd5BDLtEuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0M2U0NDdlZGI4YTVlMGUxYjFkN2Y1Y2RjMjg3YzM2NGE1
ZmIwYjUwHhcNMjMwMTAyMDUzNzEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTgyYzM0NDU4ODc3Y2ZkZWZmYTRmNTA1NzVjYWJkZjczOTY1OGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gHvBL0bAnKGT8THj1Vq08vtss+s
Bx2C8stot0XKwKgyl1Y7GWQbtdMXyW8OSYIw06H1bgdIrK45R2UTl6Sn+PNzbL+j
NIVVubD0rnxb6ZUl1tVaSR8qmT5LLQySwr0y5OUUJWpv9SDaBKJUYSz/Xdk4PSfC
k8xy9l7jVJThfly331dLv5hNJYEyuKr4LPWSuWMbhn+pT3vjfa1X8HWogOLHFZZq
LhMjRTqvhaHJmdeTkl6iZhxImMHnfgRqaInlBQRbJ9AgcaZQZ4napL/JlYgGZ649
qe4EKjUwKcs94CfW0NDsaewnIpv/Pik2onmtW1w55W5W/0sP54F6P+icnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNmCw0RYh3z97/pPUFdcq99zlli1MB8GA1UdIwQY
MBaAFHQ+RH7bil4OGx1/XNwofDZKX7C1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDct
NWUwZjRhYjgwOWJiLzEvMllMRFJGaUhmUDN2LWs5UVYxeXIzM09XV0xVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDctNWUwZjRhYjgwOWJi
LzEvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCm8EMMA0G
CSqGSIb3DQEBCwUAA4IBAQArOuD6NyuZFo2RNq516LzEAW2DmT/n0jNZQznC5Ocb
oItaESh7Se5W3xbqEmOpn9LqN4Fo3ek2X+nZ6R6F1veNcUrAFvq7ZWzyjKQsNrDG
g1YN66T3bKoTz1ohQh1p5yv4tjgVTdew0jKiTYjJ/w6tWuqHRHI6KXps0ckt+IyP
DmfINUhWqdXHbqmu7QyYoZkXbJ3iGvN/rViwPUr4bhHDakRE0o69kjuQuHI0T4Ql
Q4uWohqfioi8EpGfzjLe3z/i/KDCjClOLKA+qlLJtnUW+6GgQX+8VyLmvUromGui
A6Frzb3vDg3d177f/1G6iFC8QrG7rlY3hsIQhkvpFpas
-----END CERTIFICATE-----
Generated at Thu Aug 24 17:33:27 2023 by rpki-client on console-fra.rpki-client.org